Resources for Federal Information Security Management Act (FISMA)

Computer forensics in the age of compliance

computerworld.com

The process of using the scientific method to examine digital media in order to establish facts for legal purposes, especially judicial review is known as Digital forensics. It involves the systematic inspection of IT systems, especially data-storage devices, for evidence of a civil wrongdoing or criminal act. Because of its focus on facts and scientific method, computer forensics processes must adhere to courtroom standards of admissible evidence, which severely complicates some of the otherwise simple data-analysis tasks such as looking at logs to determine who connected to the system. Thus, forensic investigation of computer evidence is different from a routine review of logs and system data, which often produces "hunch-quality data" and not facts.

View the Resource

Share or bookmarklet this web page at: